Introduce sniffer as a simple wrapper over tcpdump

Change-Id: I257bb1a4c3fc5ebfb57f966ed8a4634b84b1b8e7
Not familiar with 'fab'. Any pointers?